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DETAILED ACTION 

1 . This action is response to communication: amendment filed on 09/22/2008. 

2. Claims 1 -7, 9-1 6, 1 8-27, 29-31 , 39-44, and 46-47 are currently pending in this 
application. Claims 1,12,21, and 39 are independent claims. 

3. No new IDS has been received for this application. 

Response to Arguments 

4. Applicant's arguments filed 02/26/2008 have been fully considered but they are 
not persuasive. 

First of all, the applicants argue several of the amended limitations of claims 1 
and 12. However, claim 1 2 is not amended in any way to include the new claim 
limitations. Thus, the arguments concerning claim 12 and the dependent claims are 
moot. 

The appellants first argue that the references do not teach receiving signals by 
the first processor that the remaining processors have entered the halted state. 
However, the first processor never makes use of this information in the claims. The 
claims do not recite how this information is used in anyway. Further, England teaches 
in col. 4 lines 44-55 that the first processor receives signals after the other processors 
have been halted. In England's system, since only one CPU receives signals at startup, 
these signals indicate to the CPU that the other processors have been halted, as it is 
the only one receiving the signals. 
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The applicants also argue that the England combination does not teach 
identifying a secure region in a memory of a computer and loading content into the 
identified region. However, England teaches such limitations. As seen in Figure 1 and 
described in col. 4 line 55 to col. 5 line 21 , the secure region of memory is 1 10, 
Information is retrieved from Rom and loaded into memory 110 and run there. 

The applicants also argue that identity of the content is not registered until after 
the content is loaded into the identified region. However, this is taught by England. As 
seen in the argument above, the secure region is memory 110. Further, Schneier 
teaches hashing and signing information after information is stored. 

The applicants also argue that the England combination does not teach exiting 
the halted state and jumping to the known entry point in the identified region in the 
memory. However, England teaches this, such as in col. 13 lines 45-61 . 

The same art will still be applied to the amended claims, as seen in the art 
rejections below. 

Claim Rejections - 35 USC §112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

6. Claims 1-11 and 21-47 are rejected under 35 U.S.C. 112, second paragraph, as 
being incomplete for omitting essential steps, such omission amounting to a gap 
between the steps. See MPEP § 2172.01. The independent claims recite receiving 
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signals by the first processor that the remaining processors have entered the halted 
state. However, this information is not utilized in any useful way in the claims. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1 -7, 9,11-15,1 7-25, 30, 31 , 39-44, and 46-47 are rejected under 35 
U.S.C. 103(a) as being obvious over England et al. US Patent No. 6,938,164 
(hereinafter England), in view of Bruce Schneier's Applied Cryptography (Second 
Edition), and further in view of Fries US Patent No. 7,036,023 (hereinafter Fries). 

As per independent claim 1 , England teaches a method of loading a trustable 
operating system comprising: 

Performing a start secure operation by a first processor of a plurality of 
processors (col. 4 lines 25-56); performing a join secure operation by remaining 
processors of the plurality of processors excluding the first processor, the join secure 
operation forces the remaining processors of the plurality of processors to enter into a 
halted state that prevents the remaining processors of the plurality of processors from 
interfering with the operations of the first processor (col. 4 lines 44-54; col. 10 lines 20- 
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28; col. 10 lines 55-68; col. 13 lines 42-45); receiving signals by the first processor that 
the remaining processors have entered the halted stated (col. 4 lines 43-55); identifying 
a region in a memory of a computer by a one of a plurality of processors (col. 2 lines 16- 
21; col. 4 line 54 to col. 5 line 12; col. 3 lines 9-13); loading a content into the identified 
region (col. 5 lines 5-20); registering an identity of the content after the content is loaded 
onto the identified region, the registering comprises: recording a hash digest of the 
content of the identified region (col. 5 lines 49-65), the signed hash digest being stored 
in a register in the memory of the computer that is accessible by an outside entity to 
verify whether the content can be trusted (col. 5 lines 49-65; col. 14 lines 10-24; also 
col. 8 lines 14-50, wherein ); and causing the one processor to jump to a known entry 
point in the content (col. 1 1 line 63 to col. 12 line 20); and completing the start secure 
operation by the first processor and signaling the remaining processors to resume 
activity by exiting the halted state and jumping to the known entry point in the identified 
region in the memory (col. 13 lines 42-61). England also teaches that a digest is signed 
in col. 14 lines 18-25. As a digest is signed, it is inherent that a hash signing engine is 
available. (England col. 14 lines 10-25 teaches that a signed certified digest exists. 

More information can be found in Schneier pages 38 and 39, where a hash is 
signed (encrypting a hash with a private key is a method of signing).) 

However, England does not explicitly teach that a hash digest is accessed via a 
secure channel. It does indeed teach that the microcode is included in a trusted core in 
col. 14 lines 10-25. The details of this trusted core is taught in England col. 5 lines 20- 
48, and lines 42-48. These lines teach the extraction of this information, which occurs 
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in a protected method. Extracting information via a protected method may be 
considered as accessing information via a secured channel. 

Accessing important information via a secure channel is well known in the art, as 
can be seen by Fries in col. 5 lines 40-46 and col. 9 lines 45-59. Also, as seen in 
England, it would be obvious to verify a hash digest that is accessible by an outside 
entity. This is taught in col. 8 liens 14-50, where cryptographic measures may be stored 
on publicly accessible areas, in which they may be verified. These are directed toward 
hash digests, as seen in this section. 

At the time of the invention, it would have been obvious to one of ordinary skill 
in the art to include signing a hash digest in a system that registers an identity using a 
hash digest protocol. One of ordinary skill in the art would have been motivated to 
perform such an addition to save time. Schneier dictates on page 38 that "To save 
time, digital signature protocols are often implemented with on-way hash functions.... 
Instead of signing a document, Alice signs the hash of the document." Also, England 
indicates that additional information on hashing can be found in Schneier: "the reader is 
directed to a text written by Bruce Schneier and entited "Applied Cryptography: 
Protocols, Algorithms, and Source Code in C," published by John Wiley & Sons with 
copyright 1994 (or second edition with copyright 1996)" (col. 5 lines 61-65), and 
therefore, it is obvious to combine the teachings of Schneier's Applied Cryptography. 

At the time of the invention, it would have been obvious to one of ordinary skill in 
the art to access secure information such as signatures via a secure channel. England 
already teaches storing secure information on a trusted core, such as in col. 5 lines 20- 
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48, and extracting the information securely. One of ordinary skill in the art would be 
motivated to transport important information such as signed hashes via secured 
channels to provide security for the system, as sending signatures without a security 
channel compromises the security of the data as well as the system. 

As per claim 2, preventing interference with the identifying, loading, and 
registering by at least one of a remaining one of the plurality of processors are taught in 
col. 2 lines 1 1-25. England dictates "According to one aspect, a memory controller 
prevents CPUs and other I/O bus masters from accessing memory during a code (for 
example, OS, microkernel, or other trusted core) initialization process." Since this 
method prevents CPUs to access memory, it will restrict it from identifying, loading, and 
registering as memory cannot be accessed. Identifying, loading, and registering is 
taught in col. 9 line 57 to col. 10 line 1 1 . 

As per claim 3, preventing interference comprises halting at least the second 
processor of the plurality of processors until the identifying, loading, and registering is 
complete (col. 2 lines 10-25). The other processors are halted as they are being reset. 
England dictates "Once an initialization process has been executed by that CPU, the 
code is operational and any other CPUs are allowed to access memory (after being 
reset), as are any other bus masters (subject to any controls imposed by the initiated 
code)." Identifying, loading, and registering is taught in col. 9 line 57 to col. 10 line 1 1 . 

As per claim 4, causing at least the second processor of the plurality of 
processors to jump to the known entry point in the content is taught in col. 2 lines 10-25, 
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as it states that "other CPUs are allowed to access memory" after the initialization 
process is complete. 

As per claim 5, identifying comprises receiving a region parameter, the region 
parameter specifying a location of the region. This is taught in col. 9 lines 59-62, where 
it indicates that the start parameter "refers to the location in memory 1 10 where trusted 
core 146 begins (e.g., the memory address of the first instruction of platform trusted 
code portion 148)." 

As per claim 6, the location comprises a range of addresses in the memory of the 
computer within which the region is located. Addresses are taught already in the 
rejection for claim 5 above, and can also be found in col. 1 1 line 63 to col. 12 line 20 
and also col. 14 lines 55-65. Also, col. 10 line 55 to col. 11 line 15 indicate a range of 
addresses that can be accepted. 

As per claim 7, the location comprises a start address and a length of the 
memory of the computer within which the region is located. This is taught in col. 9 lines 
57-67: "the Trusted Core Initialization command includes three parameters: start, 
length of code, and length of memory ... the start parameter refers to the location in 
memory where trusted core begins (e.g., the memory address of the first instruction...". 

As per claim 9, England teaches that the content is a component of an operating 
system to operate the computer. Col. 5 lines 13-20 indicate this: "Various components 
1 44 of an operating system are thus laded into memory 110 ... ." 
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As per claim 1 1 , England teaches that loading and registering are uninterruptible. 
Col. 14 lines 45-54 indicate that interrupts are disallowed during the initialization 
process. It is already rejected in the above claims that the initialization process 
comprises loading and registering. 

As per independent claim 12, England teaches an article of manufacture 
comprising: a machine-accessible medium including a data that, when accessed by a 
machine cause the machine to, halt all but one of a plurality of central processing units 
(CPU) in a computer (col. 2 lines 10-25; col. 3 lines 9-13); identify a region in a memory 
of the computer (col. 2 lines 16-21 and col. 4 lines 54 to col. 5 line 12); block access to 
the identified region by all resources except the non-halted CPU (col. 2 lines 10-25; col. 
10 line 55 to col. 1 1 line 15); load a content into the identified region (col. 5 lines 5-20); 
registering an identity of the content of the identified region, the registering comprises: 
compute the cryptographic hash of the identified region (col. 5 lines 49-65; col. 14 lines 
10-24; also Schneier); recording the computed cryptographic hash of the content in the 
identified region (col. 5 line 49 to col. 6 line 5; col. 14 lines 10-24, wherein it teaches that 
a cryptographically signed digest is retrieved, which would inherently indicate that a 
hash was recorded); and signing the computed cryptographic hash with a hash signing 
engine having a secure channel to access the cryptographic hash (rejected using the 
same arguments as claim 1), the signed cryptographic hash being stored in a register in 
the memory of the computer that is accessible to a third party to verify whether the 
content can be trusted (rejection seen in claim 1); and cause the non-halted CPU to 
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being executing at a known entry point in the identified region after the identity of the 
content has been registered (col. 1 1 line 63 to col. 12 line 20). Also, the other 
limitations taught in this claim are rejected using the same basis of arguments used to 
reject claim 1 above. 

As per claim 13, England teaches that the data that causes the machine to halt 
all but one of a plurality of CPUs comprises data causing the all but one of a plurality of 
CPUs to enter a halted state: "CPUs can be prevented form issuing read and write 
requests on processor bus 1 12, or by issuing a halt (e.g., HLT) command to the CPUs 
which halts the operation of each CPU until it resets" (col. 10 lines (62-67). 

As per claim 14, England teaches that the data further causes the halted CPUs 
to exit the halted state after the non-halted CPU has begun executing at the known 
entry point in the identified region. This is taught in col. 2 lines 10-25, where the CPUs 
are reset and allowed to access memory through the initiated code. Also, this occurs 
after one of the plurality of CPUs has begun executing at the known entry point, as 
taught in col. 2 lines 10-25. 

As per claim 15, England teaches in col. 2 lines 10-25 that the data further 
causes the previously hated CPUs to begin executing at the known entry point in the 
identified region upon exiting the halted state: "Once an initialization process has been 
executed by that CPU, the code is operational and any other CPUs are allowed to 
access memory (after being reset), as are any other bus masters." 
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Claim 18 is being rejected using the same basis of arguments used to reject 
claim 5. 

Claim 19 is being rejected using the same basis of arguments used to reject 
claim 6. 

Claim 20 is being rejected using the same basis of arguments used to reject 
claim 7. 

As per independent claim 21 , England teaches halting all but one of plurality of 
central processing units in a computer (col. 2 lines 10-25). Blocking access to the 
identified region by all resources except the non-halted CPU is taught in col. 10 line 55 
to col. 1 1 line 15. Recording a cryptographic hash of the content of the identified region 
is taught in col. 5 line 49 to col. 6 line 5. Placing the non-halted CPU into a known 
privileged state is taught in col. 6 lines 38-63. Signing the cryptographic hash with a 
digest signing engine coupled to the memory of the computer having a secure channel 
to access the cryptographic hash and storing the hash in a register in the memory that 
is accessible by an outside identity to verify whether the content can be trusted is 
rejected using the same basis of arguments used to reject claim 1 . 

As per claim 22, jumping to a known entry point in the region is taught in (col. 1 1 
line 63 to col. 12 line 20). 

As per claim 23, England teaches that halting comprises causing the all but one 
of a plurality of CPUs to enter a special halted state (col. 10 line 55 to col. 11 line 15). 
This halted state is special as only the CPUs that need to be halted receive this 'HLT 
command. 
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As per claim 24, England teaches exiting the special halted state after the non- 
halted CPU has begun executing at the known entry point in the identified region. This 
is taught in col. 2 lines 10-25, where the CPUs are reset and allowed to access memory 
through the initiated code. 

As per claim 25, England teaches in col. 2 lines 10-25 that the data further 
causes the previously hated CPUs to begin executing at the known entry point in the 
identified region upon exiting the special halted state: "Once an initialization process 
has been executed by that CPU, the code is operational and any other CPUs are 
allowed to access memory (after being reset), as are any other bus masters." 

Claim 29 is being rejected using the same basis of arguments used to reject 
claim 5. This location is secured, as taught in col. 9 lines 62-67. 

Claim 30 is being rejected using the same basis of arguments used to reject 
claim 6. Col. 1 1 line 63 to col. 1 2 line 20 indicate that the addresses are of the trusted 
core, which is secure. 

Claim 31 is being rejected using the same basis of arguments used to reject 
claim 7. This region is secured, as this is part of the initialization sequence by the 
trusted core. 

As per independent claim 39, England teaches a method of loading a trustable 
operating system comprising: selecting an area in a memory accessible to a processor 
(col. 2 lines 10-25); loading a data into the selected area (col. 5 lines 13-30); registering 
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an identity of the data loaded in the selected area (as shown in rejection to claim 12); 
recording a unique cryptographic function of the data loaded in the selected area (as 
shown in the rejection for claim 12); signing the unique cryptographic function with a 
hash signing engine having a secure channel to access the unique cryptographic 
function, the signed unique cryptographic function being stored in a register in memory 
and accessible by an outside entity to verify whether the data is trustworthy (as shown 
in the rejection for claim 12 and 1 ); directing the processor to commence processing at 
an entry point in the selected area (col. 1 1 line 63 to col. 12 line 20); and preventing 
interruption of the selecting, load, registering, recording, signing, and directing until they 
are completed (col. 2 lines 1 1-24; since this method prevents CPUs to access memory 
until the first processor finishes initializing and the other CPUs are reset, it will prevent 
the selecting, loading, directing, registering, recording, and signing until they are 
completed. The selecting, loading, directing, registering, recording, and signing are part 
of the initialization process). Further, claim 39 is rejected using the same basis of 
arguments used to reject claim 1 above. 

As per claim 40, halting any other processors having access to the memory until 
the selecting, loading, and directing is complete is taught in col. 10 line 55 to col. 11 line 
15. These processors are halted until they are reset, and they are reset after the 
initialization process is complete, as indicated in col. 2 lines 10-25. 

As per claim 41 , causing the other processors to commence processing at an 
entry point in the selected area is taught in col. 2 lines 10-25, where the other CPUs are 



Application/Control Number: 10/085,839 Page 14 

Art Unit: 2434 

allowed to access the memory. It is also taught in col. 10 line 55 to col. 11 line 1 5 that 
the other CPUs are allowed to access the memory within an address range of the 
trusted core memory. 

As per claim 42, receiving a parameter specifying a location of the area to be 
selected is taught in col. 9 lines 59-62, where it indicates that the start parameter "refers 
to the location in memory 110 where trusted core 146 begins (e.g., the memory address 
of the first instruction of platform trusted code portion 148)." 

As per claim 43, the location comprises a range of addresses in the memory of 
the computer within which the region is located. Addresses are taught already in the 
rejection for claim 5 above, and can also be found in col. 1 1 line 63 to col. 12 line 20 
and also col. 14 lines 55-65. Also, col. 10 line 55 to col. 11 line 15 indicate a range of 
addresses that can be accepted. 

As per claim 44, the location comprises a start address and a length of the 
memory of the computer within which the region is located. This is taught in col. 9 lines 
57-67: "the Trusted Core Initialization command includes three parameters: start, 
length of code, and length of memory ... the start parameter refers to the location in 
memory where trusted core begins (e.g., the memory address of the first instruction...". 

Claim 46 is rejected using the same basis of arguments used to reject claim 9. 
The memory resides in this device, as it is an internal memory, as indicated in col. 5 
lines 5-12. 



Application/Control Number: 10/085,839 Page 15 

Art Unit: 2434 

As per claim 47, England indicates in col. 5 lines 13-20 that the operating 
systems can be Windows® operating systems. It is inherent that Windows® has a 
graphical user interface. 

9. Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over the 
England combination as applied above, and further in view of ATPM - Review: Virtual 
PC 4.0 (April 2001 ), by Gregory Tetrault. 

As per claim 10, col. 5 lines 13-20 indicate various operating systems. A 
privileged software nucleus is taught in col. 6 lines 38-63, in which different privilege 
levels are taught. However a virtual machine monitor is not taught in England. 
However, this is taught in ATPM's review of Virtual PC, reviewed by Gregory Tetrault. 
ATPM indicates that Windows® supported virtual machine. 

At the time of the invention, it would have been obvious to one of ordinary skill in 
the art to include the use of virtual machines when using Windows® operating systems. 
One would have been motivated to perform such an addition, because a virtual machine 
is an option provided by operating systems such as Windows®, and is useful for 
networking. Col. 3 lines 4-14 of England indicates that the invention can apply to 
network PCs as well, and a virtual machine is an example of a network PC. 
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10. Claim 16, 26, and 27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over the England combination as applied above, and further in view of England et al. US 
Patent No. 6,330,670 (hereinafter '670). 

As per claim 16, a required platform information is recorded in the hash digest 
area, as England indicates that the digest contains a value that can be considered to 
uniquely represent the trusted core in use. Erasing a hash digest area (which is a 
register) is taught in col. 12 lines 31-39. This section teaches that a CPU clears the 
states of the CPU, which is located in the registers. However, at the time of the 
invention, '670 does not explicitly teach wherein the platform information includes a 
version number of the one of the plurality of CPU's. This is taught by '670 though, such 
as in col. 2 line 60 to col. 3 line 15. 

At the time of the invention, it would have been obvious to one of ordinary skill in 
the art to implement checking platform information for authorization. One of ordinary 
skill in the art would have been motivated to perform such an addition to create a secure 
environment for operating systems to be executed on, focusing on the correct and 
authorized hardware components trusted to run such information. As shown in the 
passage, this is well known in the art, and is used to ensure that software is running on 
the correct hardware, thereby increasing security. 

Claim 26 is rejected using the same basis of arguments used to reject claim 16. 

Claim 27 is rejected using the same basis of arguments used to reject claim 17. 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

1 1 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JASON K. GEE whose telephone number is (571)272- 
6431 . The examiner can normally be reached on M-F, 7:00 am to 4:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Jason Gee 
Patent Examiner 
Technology Center 2400 
10/19/2008 



/Kambiz Zand/ 

Supervisory Patent Examiner, Art Unit 2434 



